Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e39352e302f32342d3234203d3e203633333735.roa
File:                     3139302e39332e39352e302f32342d3234203d3e203633333735.roa (raw, json)
Hash identifier:          6OL8ZVzvKdqszd0s0RAFUZcS9YEs/Cc/ZoVcyhafB6o=
Subject key identifier:   A0:C6:82:3A:2A:FD:92:F4:8D:48:1F:7D:D5:07:75:68:68:F5:61:54
Certificate issuer:       /CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
Certificate serial:       025C11F69662819336183F5A342EBF53DC67CE20
Authority key identifier: 2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e39352e302f32342d3234203d3e203633333735.roa
Signing time:             Tue 05 Mar 2024 18:18:29 +0000
ROA not before:           Tue 05 Mar 2024 18:13:29 +0000
ROA not after:            Tue 04 Mar 2025 18:18:29 +0000
asID:                     63375
IP address blocks:        190.93.95.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl
                          rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 02 Jun 2024 20:15:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:5c:11:f6:96:62:81:93:36:18:3f:5a:34:2e:bf:53:dc:67:ce:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
        Validity
            Not Before: Mar  5 18:13:29 2024 GMT
            Not After : Mar  4 18:18:29 2025 GMT
        Subject: CN=A0C6823A2AFD92F48D481F7DD507756868F56154
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:51:98:57:08:a3:7b:af:04:1e:43:78:8a:d4:
                    cd:45:2e:8c:4d:02:1c:d8:9a:7c:00:7b:6c:2e:90:
                    a2:74:3d:c5:6d:3b:56:e6:d8:b7:67:c2:ce:62:bf:
                    39:8c:b7:a0:e1:54:80:94:66:89:3f:ac:52:59:31:
                    d9:31:58:c6:28:f8:ad:70:63:ea:cd:46:6e:35:e7:
                    34:20:fd:1f:b2:ea:63:39:d8:a2:66:3d:05:92:9e:
                    d1:a3:55:2a:88:8e:31:84:cf:8c:fd:68:18:72:46:
                    ee:09:c8:a4:bc:06:b8:c6:98:a6:3d:83:34:7b:bd:
                    7b:ad:38:6c:56:b4:13:5b:cd:42:54:98:66:c8:e0:
                    80:f8:f4:e1:54:27:26:4d:43:56:bc:1d:ba:93:fb:
                    80:26:b3:94:7c:f5:45:f9:36:d2:0c:94:b8:6b:c7:
                    ad:b0:b8:7b:2c:cd:94:95:7d:03:69:65:12:b7:15:
                    e1:74:99:86:2f:3c:16:1c:35:43:f2:38:e5:6f:c1:
                    79:73:3c:36:de:41:52:0c:2d:a8:b1:70:a5:96:29:
                    88:94:08:35:8e:b7:2f:5d:0f:3b:f3:ed:25:77:c4:
                    4c:7e:10:1a:e2:54:38:45:0c:2a:92:df:28:46:d6:
                    88:6e:e6:a3:fe:7f:d2:4e:be:63:13:73:40:ea:a2:
                    1d:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:C6:82:3A:2A:FD:92:F4:8D:48:1F:7D:D5:07:75:68:68:F5:61:54
            X509v3 Authority Key Identifier:
                keyid:2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e39352e302f32342d3234203d3e203633333735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:28:dc:50:9d:9d:11:a1:5e:83:90:b5:b8:64:2c:2f:e0:f4:
         4a:a8:0a:0d:5d:ec:0b:e8:6f:c7:46:3f:6b:19:87:99:f7:14:
         a3:f5:fe:5f:ba:fc:d4:b0:2e:38:15:1b:0f:54:ef:d5:d1:76:
         ef:92:41:22:f0:d3:72:13:91:2c:e2:30:70:a2:14:e0:3e:af:
         e5:37:60:db:77:17:39:bf:0b:f5:ef:c9:7c:9d:25:ad:df:43:
         cf:cc:19:5a:7f:c1:52:c8:f3:b0:4c:ee:f1:5c:64:28:6f:28:
         c1:8a:27:7c:45:d3:19:06:cf:2e:85:78:0a:5b:69:94:7e:bd:
         c9:89:2c:60:8a:64:f3:c5:b5:57:18:a1:c9:a3:fb:09:4f:e4:
         7a:33:2a:f7:f6:8f:e5:b0:87:28:36:79:dc:8a:b6:b2:f9:fb:
         85:21:53:ec:f3:ec:eb:68:b8:5f:16:2f:47:5b:fc:38:03:93:
         1d:22:57:4c:7e:d6:5e:5e:7d:bf:dc:8d:b5:19:bb:55:16:0a:
         14:3e:99:bf:57:b0:79:e6:ac:db:c2:82:56:4c:f1:9d:47:2c:
         ab:dd:e5:c3:c3:f7:6c:7f:5d:83:f8:a5:9e:70:79:cc:dc:ca:
         5a:16:24:3d:74:59:c7:93:21:c3:d5:1d:85:31:0e:50:2c:d3:
         de:09:af:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 20:34:55 2024 by rpki-client on console-fra.rpki-client.org